PSA_KEY_USAGE_EXPORT macro
Whether the key may be exported. A public key or the public part of a key pair may always be exported regardless of the value of this permission flag. If a key does not have export permission, implementations shall not allow the key to be exported in plain form from the cryptoprocessor, whether through psa_export_key() or through a proprietary interface. The key may however be exportable in a wrapped form, i.e. in a form where it is encrypted by another key.